CPanel’s Black Week: 3 New Vulnerabilities Patched

Executive TL;DR:

• 3 new vulnerabilities patched in CPanel
• 44k servers attacked
• CPanel’s old codebase raises concerns

The Internet’s Verdict: 70% Hyped, 30% Skeptical

CPanel’s Security Concerns

CPanel has patched 3 new vulnerabilities after an attack on 44k servers.

Forum Reactions

Some users are concerned about CPanel’s old codebase.

Ages ago I used php-nuke to manage my forum and it got hacked and I thought it would get taken seriously Seeing these CPanel hacks remind me how old these codebases are and how much more vulnerability remain

CPanel and hosters who use them are in big trouble now; there are millions of servers running them, many of them for decades. Their clients can run code as an user without much sandboxing/guardrails at all.

Focus Keyword: CPanel Vulnerabilities